X-Git-Url: http://erislabs.net/gitweb/?a=blobdiff_plain;f=templates-dist%2Fadmin%2Ffeaturelist.template;h=01c9252abcfa09312b10f2ab902d673f7bc50560;hb=5ff55a1f615f4b1c437ee4a5ccc9581f48188f5a;hp=cd9a40d50dfe2de57ca233ca926c4fd391976602;hpb=9c43437577f3239c3c3526759edc6c3f9d8a31e8;p=mir.git

diff --git a/templates-dist/admin/featurelist.template b/templates-dist/admin/featurelist.template
index cd9a40d5..01c9252a 100755
--- a/templates-dist/admin/featurelist.template
+++ b/templates-dist/admin/featurelist.template
@@ -21,35 +21,35 @@
   <if grey=="1"><assign grey="0">bgcolor="#dddddd" <else><assign grey="1"> </if>
   >
   <td align="center"><if entry.is_published!="0">X<else>&nbsp;</if></td>
-  <td>${entry.title}&nbsp;</td>
-  <td>${entry.filename}&nbsp;</td>
-  <td>${entry.main_url}&nbsp;</td>
-  <td>${entry.description}&nbsp;</td>
-  <td><font size="1"> <a href="${config.actionRoot}?module=Schwerpunkt&do=delete&id=${entry.id}">${lang("delete")}</a>
-  | <a href="${config.actionRoot}?module=Schwerpunkt&do=edit&id=${entry.id}">${lang("edit")}</a></font></td>
+  <td>${encodeHTML(entry.title)}&nbsp;</td>
+  <td>${encodeHTML(entry.filename)}&nbsp;</td>
+  <td>${encodeHTML(entry.main_url)}&nbsp;</td>
+  <td>${encodeHTML(entry.description)}&nbsp;</td>
+  <td><font size="1"> <a href="${encodeHTML(config.actionRoot)}?module=Schwerpunkt&do=delete&id=${encodeHTML(entry.id)}">${lang("delete")}</a>
+  | <a href="${encodeHTML(config.actionRoot)}?module=Schwerpunkt&do=edit&id=${encodeHTML(entry.id)}">${lang("edit")}</a></font></td>
   </tr>
   </list>
 
   <tr>
     <td align="center" colspan="5" bgcolor="#006600">
-      <div align="left"><font color="#ffffff">${data.count} ${lang("records")} /
+      <div align="left"><font color="#ffffff">${encodeHTML(data.count)} ${lang("records")} /
         ${lang("show_from_to", data.from, data.to)}</font></div>
     </td>
-    <td><a href="${config.docRoot}"><font size="1">&nbsp;${lang("back")}</font></a></td>
+    <td><a href="${encodeHTML(config.docRoot)}"><font size="1">&nbsp;${lang("back")}</font></a></td>
   </tr>
 </table>
 
       <P>
 <if (data.prev || data.next)>
- <form method="post" action="${config.actionRoot}">
+ <form method="post" action="${encodeHTML(config.actionRoot)}">
  <input type="hidden" name="module" value="Schwerpunkt">
- <input type="hidden" name="where" value="${data.where}">
+ <input type="hidden" name="where" value="${encodeHTML(data.where)}">
 <if data.prev>
- <input type="hidden" name="prevoffset" value="${data.prev}">
+ <input type="hidden" name="prevoffset" value="${encodeHTML(data.prev)}">
  <input type="submit" name="prev" value="${lang("list.previous")}">
 </if>
 <if data.next>
- <input type="hidden" name="nextoffset" value="${data.next}">
+ <input type="hidden" name="nextoffset" value="${encodeHTML(data.next)}">
  <input type="submit" name="next" value="${lang("list.next")}">
 </if>
  </form>